Body
Environment
University of Michigan, Duo Two-Factor Authentication
Issue
Information about removal of Phone/SMS options for Duo, and link to more information about other options for two-factor authentication.
Resolution
As of April 15, 2025, Phone Call and SMS (text message) options are no longer available when enrolling in Duo. Instead, ITS recommends one of the following options:
- Duo Mobile App with Verified Push Notifications (recommended)
- Duo Mobile App with Mobile Passcodes - Recommended when traveling and/or when you do not have access to WiFi or a cellular connection.
- U-M Hardware Token or YubiKey
- Security Key
- Biometric Options on your device, if available
- Temporary Bypass Code for those with technology restrictions
See Options for Two-Factor Authentication for details about each of these options.
Exceptions
For the time being, those who are currently only using Phone Call and SMS authentication options will be allowed to continue using them. However, these are not the preferred methods for authentication as they are less secure and make it easier for threat actors to impersonate legitimate users, so you are encouraged to prepare for the change by switching now to one of the other Options for Two-Factor Authentication.
These users will be notified prior to Phone Call and SMS authentication options being discontinued, and you will then be required to select one of the other approved methods for logging in with Duo.
If for some reason you are unable to use any of the available alternatives to the Phone Call / SMS authentication options at this time, you can submit an exception request and a member of the Duo team will contact you.
Additional Information
Need additional information or assistance? Contact the ITS Service Center.
If you need help choosing a Duo two-factor authentication option that meets your needs, or encounter a disability-related barrier, contact the ITS Accessibility Team.